February 16, 2005

Domain Name Scams

I’m looking at a letter from a company called “ILSCORP.NET”. It is in reference to another domain name that Webmail.us owns. The notice date is February 15th, 2005. I have a customer number of CD474454XX.

“Please make checks payable to Internet Listing Service Corp. Please write your customer number on the front of your check Enclose check in the addressed envelope provided DO NOT SEND CASH”

Pretty serious stuff here, it goes on:

“To ensure listing by Feb 28, 2005, please remit payment on or before Feb 22, 2005 All listings are final”

Well, I’d better get right on this! But then there’s the text on the back that says, “This is not a bill. This is a solicitation. You are under no obligation to pay the amount stated above unless you accept this offer.”

It’s too bad that the rest of the document makes it look like we owe someone money to continue a service that we already had.

It’s always in the fine print

OK, the print is pretty legible, but it is clearly a font size or two down from the rest of the doc. And it’s on the back page when the front page already looks like a complete document.

The art of deception

There are a few subtle but convincing touches that scams such as this use to close deals and make money.

-- They use real information about you or your company --

In this case, they used our domain name. If you own a domain name then the billing address for your company and the names of contacts at your company are available through a standard Internet service known as WHOIS. Using this information allows them to customize their attack.

-- They create the impression that you are already a customer --

The customer number at the top of the “bill” seems legit. If I have a customer number, maybe I really did send these people money before.

The solicitation itself appears to be a bill. It has 3 major sections: “How to make payment:”, “Website address listing includes:”, and “Payment information:”. It shows me how much to pay and where to send my check—but, “Do not send cash”.

-- They create a sense of urgency --

Because “All listings are final”, I need to hurry and send them a check. They give me a due date of Feb 22. This sense of urgency might get me to respond before I look things over carefully.

-- Online risks --

It seems that being a domain name owner makes you a target for this and related scams. Having your WHOIS information freely available to the entire world is a double-edged sword.

And the more we all do business online, the harder it is to remember the names of businesses we use on an infrequent basis. It’s easy to make a mistake.

Other common scams to watch out for

Domain name slamming: you get an email or a letter telling you that your domain name will expire soon. The letter explains that in order to protect your domain name a check needs to be sent to company XYZ who can keep your domain name safe. The problem is that the letter doesn’t come from the company you used to register your domain.

Phishing: you get an email asking you to go to your bank or online retail store in order to update your contact information or to check on an order. The only problem is, that the links provided in the email don’t go to Amazon.com or whatever site you intended to visit. Instead, you end up at a site that closely mimics the real site and you might mistakenly hand over a username and password or perhaps even credit card information.

Nigerian email scam: this is an absolute classic. Read about it on Snopes.com. If you’ll front some money to a wealthy but helpless stranger, they’ll send you millions.

How to protect yourself

Keep good records! Knowing whether or not something is legit can be as easy as walking to a file cabinet and looking for a name that matches the letter or email you have received. Congress, with the Sarbanes-Oxley Act, is encouraging (enforcing?) record-keeping policies for businesses in the United States.

Pick up the phone and make a call. Or send an email. ILSCorp's letter to me and their website are both lacking a phone number-- a red flag in itself. Their website says I may have to wait up to 2 days for a response to the email I sent them this morning asking about their service and my domain name. I'll let you know when they get back with me. ;)

Email scams can generally be caught by good anti-spam filters. Yes, like the ones we use for our customers. But I don’t know a good way to filter snail mail except through a little extra time and attention to detail.

Comments

I've gotten a number of these scams in the mail. I find it amusing because the scams often want you to pay more for domain re-registration than what your registrar charges.

Another way to protect oneself from other forms of fraud: buy a shredder. Any piece of paper that I don't want to keep that has account numbers on them I shred. It's scary the amount of information you can find out about someone by going through their garbage (not that I've ever done it =).

Good point about the shredder, Vince. Along those same lines, I've heard it said that homeowners shouldn't put their trash out the night before trash pickup; put it out the morning-of as a way to discourage potential trash stalkers.

I received what I believed to be an invoice from these jokers. I wondered why I owed £65 to a company that I had never heard of. I googled the company name and found 100s of entries complaining about them, (Most of them from the USA) - Now it seems they are operating in the UK too.

Domain Registry of America is one of the worst scam artist. I have over 400 clients and they call me about receiving an invoice from this company most often, trying to lure them into unwittingly transfer their domain to this company. Do not register with Domain Registry of America, they are unethical!

Butterfly Marketing seems to be all the rage this week. A few months ago it was Jason Thinga- me- jig with his Article Announcer, next week John Reese will have some new you beaut thing to get us all excited about.

people say that jeff paul is a scam. i completely disagree with this comment because i personally have a really good experience with jeff paul and it really helped me make money. People should avoid blaming someone for something that is not true.

One afternoon, I was in the backyard hanging the laundry when an old, tired-looking dog wandered into the yard. I could tell from his collar and well-fed belly that he had a home. But when I walked into the house, he followed me, sauntered down the hall and fell asleep in a corner. An hour later, he went to the door, and I let him out. The next day he was back. He resumed his position in the hallway and slept for an hour.
This continued for several weeks. Curious, I pinned a note to his collar: "Every afternoon your dog comes to my house for a nap. "
The next day he arrived with a different note pinned to his collar: "He lives in a home with ten children - he's trying to catch up on his sleep."

This Is a very informative blog , I am really pleased to post my comment on this blog . It helped me with ocean of knowledge so I really belive you will do much better in the future . Good job web master .http://www.shredderwarehouse.com

I think a lot of organizations are exploring new ways to become more cost efficient these days. Many big companies often use large amounts of paper in their everyday environments.So they need a paper shredders because Paper shredders are a simple solution to destroying many of the documents and materials that hold private information.Taking simple steps, such as purchasing a paper shredder, can help you avoid a lot of pain and suffering in the future. That seems well worth the small investment.Wanted to compliment on your site, it looks really good.

I think a lot of organizations are exploring new ways to become more cost efficient these days. Many big companies often use large amounts of paper in their everyday environments.So they need a paper shredders because Paper shredders are a simple solution to destroying many of the documents and materials that hold private information.Taking simple steps, such as purchasing a paper shredder, can help you avoid a lot of pain and suffering in the future. That seems well worth the small investment.Wanted to compliment on your site, it looks really good.

As for theory - you have to explore it yourself. As for practice - maybe I could give some help. I found an interesting soft on one of the thematic forum recently. It searches for combination automatically. Nice one, though poor in interface.
Program is based on Martingale system with the changed algorithm. It`s based on searching and waiting a series of results («red or black» usually). But this one I got is for «head or tail».
There were discussions «pro and against» this program, but I downloaded it and explored for about half an hour and left it in automatic mode till next evening. What I found in the morning was 250WM.
But use this soft wisely, admins in casinos do not welcome these things.
Soft:http://fff.to/19G
Mirror 1:http://fff.to/19H
Mirror 2:http://fff.to/19I
pass for the arch: 123
customized for http://headortail.com

Working for government department where each and every word is confidential. Knowing that your shredded documents cannot be reassembled and that your confidential information is safe is worth every cent of the cost of a paper shredder